Laws and Regulations

GDPR at 10: Landmark data protections, increasing business burden

While the enforcement of the GDPR is becoming significantly stricter in Europe, Europe’s data protection rules are facing their next test — this time from AI.

GRC is broken. FedRAMP 20x might fix it

Why compliance became storytelling and how FedRAMP 20x is dragging us back into reality.

Trump revives parts of canceled AI order with cybersecurity-focused directive

Less than two weeks after canceling a broader AI executive order, the White House issued a directive focused on cybersecurity, critical infrastructure, and cooperation on advanced AI systems.

GDPR set the tone for regulatory action — and the AI fine pushback to come

With just 60% of fines paid to date and AI laws on the horizon, the EU’s landmark data protection law has raised the bar for cybersecurity and exposed weaknesses regulations have in court.

The Cybersecurity Regulations Healthcare, Financial Services, and Retail Industries Must Know About

Indian CERT urges firms to contain exploited internet-facing flaws within 12 hours

The cyber agency is pushing aggressive remediation windows, continuous exposure management, and AI governance controls in what analysts say could preview future global standards.

Police take down VPN service (this time with a good reason)

But not all attempts to crack down on VPN operators are as welcome.